Styjun

Why is the ladder of the LM always in the dark side of the LM?

Great Unsolved Problems in O.R

Addressing unnecessary daily meetings with manager?

Misspelling my name on my mathematical publications

OR-backed serious games

Is English unusual in having no second person plural form?

How to say "How long have you had this dream?"

Can the Mage Hand cantrip be used to trip an enemy who is running away?

How can characters/players identify that a polymorphed dragon is a dragon?

How to tell someone I'd like to become friends without letting them think I'm romantically interested in them?

Civic overheating and hoses popping

What is the measurable difference between dry basil and fresh?

Shortest hex dumping program

Is it OK to leave real names & info visible in business card portfolio?

LED glows slightly during soldering

Killing Magic Numbers: "const int" vs "constexpr int" (or is there no difference in the end)

Switching interface VLAN ID Mid-Production

Are there any sports for which the world's best player is female?

Employers keep telling me my college isn't good enough - is there any way to fix this?

What happens to unproductive professors?

How can I effectively communicate to recruiters that a phone call is not possible?

How will law be enforced if violence becomes impossible?

Convert BAM to properly paired FASTQ files

What questions should I be able to answer when I want to enter the USA on the 4th time?

Having trouble setting up an SSL cert on an OpenShift Node.js server

set-env PATH in OpenshiftOpenshift - Unable to set the env in JBoss as7 cartridgesOpenshift unable to connect to the serverSetting up redis ENV variables — Node.js on OpenshiftOpenshift rhc setup “The OpenShift server is not responding correctly.”How to test openshift action_hooks prior to git push to Openshift serverOpenshift 3 , 503 Error (No server is available to handle this request)What is default Server URL for creating openshift project using eclipse plugin?Openshift 3 Online Starter & RoutingOpenshift Backup - Server Not Reachable

.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty margin-bottom:0;

0

I am using the free tier deployment for a REST API with Node / Express.
I already have the server up and running and it responds to requests over just HTTP.

I'm trying to follow this guide to setup the certs using certbot: https://blog.openshift.com/create-https-based-encrypted-urls-using-routes/

When I try to run the command:

oc scale dc/router --replicas=0 -n default

I get back:

Error from server (Forbidden): deploymentconfigs.apps.openshift.io 
"router" is forbidden: User "myUserName" cannot get 
deploymentconfigs.apps.openshift.io in the namespace "default": no 
RBAC policy matched

Any advice would be appreciated.

openshift devops openshift-client-tools openshift-3 openshift-cartridge

share|improve this question

asked Mar 26 at 1:25

DavidDavid

2755 bronze badges

add a comment | 

0

I am using the free tier deployment for a REST API with Node / Express.
I already have the server up and running and it responds to requests over just HTTP.

I'm trying to follow this guide to setup the certs using certbot: https://blog.openshift.com/create-https-based-encrypted-urls-using-routes/

When I try to run the command:

oc scale dc/router --replicas=0 -n default

I get back:

Error from server (Forbidden): deploymentconfigs.apps.openshift.io 
"router" is forbidden: User "myUserName" cannot get 
deploymentconfigs.apps.openshift.io in the namespace "default": no 
RBAC policy matched

Any advice would be appreciated.

openshift devops openshift-client-tools openshift-3 openshift-cartridge

share|improve this question

asked Mar 26 at 1:25

DavidDavid

2755 bronze badges

add a comment | 

I am using the free tier deployment for a REST API with Node / Express.
I already have the server up and running and it responds to requests over just HTTP.

I'm trying to follow this guide to setup the certs using certbot: https://blog.openshift.com/create-https-based-encrypted-urls-using-routes/

When I try to run the command:

oc scale dc/router --replicas=0 -n default

I get back:

Error from server (Forbidden): deploymentconfigs.apps.openshift.io 
"router" is forbidden: User "myUserName" cannot get 
deploymentconfigs.apps.openshift.io in the namespace "default": no 
RBAC policy matched

Any advice would be appreciated.

openshift devops openshift-client-tools openshift-3 openshift-cartridge

share|improve this question

asked Mar 26 at 1:25

DavidDavid

2755 bronze badges

oc scale dc/router --replicas=0 -n default

Error from server (Forbidden): deploymentconfigs.apps.openshift.io 
"router" is forbidden: User "myUserName" cannot get 
deploymentconfigs.apps.openshift.io in the namespace "default": no 
RBAC policy matched

share|improve this question

asked Mar 26 at 1:25

DavidDavid

2755 bronze badges

share|improve this question

asked Mar 26 at 1:25

DavidDavid

2755 bronze badges

asked Mar 26 at 1:25

DavidDavid

2755 bronze badges

asked Mar 26 at 1:25

DavidDavid

2755 bronze badges

1 Answer
1

active

oldest

votes

2

The linked blog post is slightly dated; one of the initial assumptions states that "You have OpenShift (either Enterprise or Origin) running.". That would be OpenShift Container Platform (formerly OpenShift Enterprise) or OKD in today's naming, deployed in your data center/cloud and fully managed by yourself. The OpenShift Online is a multi-tenant environment where users do not have administrative privileges. You won't be able to manage the cluster router, or generally manipulate with anything that is not within your project there.

Custom route hosts (with custom certificates) are not supported on OpenShift Online Starter (the free tier), but for external accessibility of your service via HTTPs, you can use the provided wildcard certificate for the default route host (*.<shard>.<cluster>.openshiftapps.com). Simply create a secure route for your existing service (the Edge TLS termination). This can be easily done in the web console, or alternatively using the oc create route edge --service=<service-name> command. Both methods are mentioned on the above linked documentation page.

share|improve this answer

answered Mar 26 at 8:12

Jiri FialaJiri Fiala

1,35544 silver badges1010 bronze badges

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  You're awesome internet stranger, have a great day!
  
  – David
  Mar 26 at 15:26
  

  
  
  
  

add a comment | 

Your Answer

StackExchange.ifUsing("editor", function ()
StackExchange.using("externalEditor", function ()
StackExchange.using("snippets", function ()
StackExchange.snippets.init();
);
);
, "code-snippets");

StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "1"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);

else
createEditor();

);

function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);



);

draft saved

draft discarded

Sign up or log in

StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);

Sign up using Google

Sign up using Facebook

Sign up using Email and Password

Post as a guest

Name

Email

Required, but never shown

StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f55348599%2fhaving-trouble-setting-up-an-ssl-cert-on-an-openshift-node-js-server%23new-answer', 'question_page');

);

Post as a guest

Name

Email

Required, but never shown

2

The linked blog post is slightly dated; one of the initial assumptions states that "You have OpenShift (either Enterprise or Origin) running.". That would be OpenShift Container Platform (formerly OpenShift Enterprise) or OKD in today's naming, deployed in your data center/cloud and fully managed by yourself. The OpenShift Online is a multi-tenant environment where users do not have administrative privileges. You won't be able to manage the cluster router, or generally manipulate with anything that is not within your project there.

Custom route hosts (with custom certificates) are not supported on OpenShift Online Starter (the free tier), but for external accessibility of your service via HTTPs, you can use the provided wildcard certificate for the default route host (*.<shard>.<cluster>.openshiftapps.com). Simply create a secure route for your existing service (the Edge TLS termination). This can be easily done in the web console, or alternatively using the oc create route edge --service=<service-name> command. Both methods are mentioned on the above linked documentation page.

share|improve this answer

answered Mar 26 at 8:12

Jiri FialaJiri Fiala

1,35544 silver badges1010 bronze badges

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  You're awesome internet stranger, have a great day!
  
  – David
  Mar 26 at 15:26
  

  
  
  
  

add a comment | 

2

The linked blog post is slightly dated; one of the initial assumptions states that "You have OpenShift (either Enterprise or Origin) running.". That would be OpenShift Container Platform (formerly OpenShift Enterprise) or OKD in today's naming, deployed in your data center/cloud and fully managed by yourself. The OpenShift Online is a multi-tenant environment where users do not have administrative privileges. You won't be able to manage the cluster router, or generally manipulate with anything that is not within your project there.

Custom route hosts (with custom certificates) are not supported on OpenShift Online Starter (the free tier), but for external accessibility of your service via HTTPs, you can use the provided wildcard certificate for the default route host (*.<shard>.<cluster>.openshiftapps.com). Simply create a secure route for your existing service (the Edge TLS termination). This can be easily done in the web console, or alternatively using the oc create route edge --service=<service-name> command. Both methods are mentioned on the above linked documentation page.

share|improve this answer

answered Mar 26 at 8:12

Jiri FialaJiri Fiala

1,35544 silver badges1010 bronze badges

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  You're awesome internet stranger, have a great day!
  
  – David
  Mar 26 at 15:26
  

  
  
  
  

add a comment | 

The linked blog post is slightly dated; one of the initial assumptions states that "You have OpenShift (either Enterprise or Origin) running.". That would be OpenShift Container Platform (formerly OpenShift Enterprise) or OKD in today's naming, deployed in your data center/cloud and fully managed by yourself. The OpenShift Online is a multi-tenant environment where users do not have administrative privileges. You won't be able to manage the cluster router, or generally manipulate with anything that is not within your project there.

Custom route hosts (with custom certificates) are not supported on OpenShift Online Starter (the free tier), but for external accessibility of your service via HTTPs, you can use the provided wildcard certificate for the default route host (*.<shard>.<cluster>.openshiftapps.com). Simply create a secure route for your existing service (the Edge TLS termination). This can be easily done in the web console, or alternatively using the oc create route edge --service=<service-name> command. Both methods are mentioned on the above linked documentation page.

share|improve this answer

answered Mar 26 at 8:12

Jiri FialaJiri Fiala

1,35544 silver badges1010 bronze badges

share|improve this answer

answered Mar 26 at 8:12

Jiri FialaJiri Fiala

1,35544 silver badges1010 bronze badges

answered Mar 26 at 8:12

Jiri FialaJiri Fiala

1,35544 silver badges1010 bronze badges

answered Mar 26 at 8:12

Jiri FialaJiri Fiala

1,35544 silver badges1010 bronze badges